ff5d82a6d7bea3cfebcf0749fece3bbbccb0d82e96bc5c43e86195fbf551a33e | Triage

Sharing

General

Target

ff5d82a6d7bea3cfebcf0749fece3bbbccb0d82e96bc5c43e86195fbf551a33e
Size

1.8MB
Sample

230305-ktkkgagb44
MD5

4718b5fd089008b96c5d22b11817cbe3
SHA1

8aba85b5356f33c9219484de6351b0a3c266a092
SHA256

ff5d82a6d7bea3cfebcf0749fece3bbbccb0d82e96bc5c43e86195fbf551a33e
SHA512

f6e95f9f3ce776fd2c988a756e80afa7286fe2b48fc943d27953382e42740c3702510fe80d11d4c4f25790d34ed8dc19c6cc7976edf3f2a46dedd5f989d2cee6
SSDEEP

49152:8VORjZhBfJXAE9iI7NNpj5aDqYnnzdCochYW:cORjZhBfKEEI7Nfj5aDqYnpCoO

Score

7^/10

Malware Config

Targets

- Target
  
  ff5d82a6d7bea3cfebcf0749fece3bbbccb0d82e96bc5c43e86195fbf551a33e
- Size
  
  1.8MB
- MD5
  
  4718b5fd089008b96c5d22b11817cbe3
- SHA1
  
  8aba85b5356f33c9219484de6351b0a3c266a092
- SHA256
  
  ff5d82a6d7bea3cfebcf0749fece3bbbccb0d82e96bc5c43e86195fbf551a33e
- SHA512
  
  f6e95f9f3ce776fd2c988a756e80afa7286fe2b48fc943d27953382e42740c3702510fe80d11d4c4f25790d34ed8dc19c6cc7976edf3f2a46dedd5f989d2cee6
- SSDEEP
  
  49152:8VORjZhBfJXAE9iI7NNpj5aDqYnnzdCochYW:cORjZhBfKEEI7Nfj5aDqYnpCoO
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1